Joomla! com_publisher component SQL injection vulnerability

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the Joomla! compublisher component. An attacker can use this vulnerability to take control of the application, access or modify data, ...

Lokomedia CMS Remote SQL Injection Vulnerability

Lokomedia CMS is a content management system. Lokomedia CMS suffers from a remote SQL injection vulnerability. An attacker could use this vulnerability to take control of the application, access or modify data, or exploit potential vulnerabilities in the underlying database...

SQL Injection Vulnerability in the Backend of Armitage Website Management System

Jingxun CMS is a website construction and management system by Taizhou Jingxun Information Technology Co. A SQL injection vulnerability exists in the backend of the 2.1 Simplified Chinese version of the Armitage CMS, due to the system not filtering the $attachment parameter. This vulnerability...

ExponentCMS SQL Injection Vulnerability (CNVD-2016-08089)

Exponent CMS is a free, open source, modular PHP-based content management system. Exponent CMS suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

FoosunCMS SQL Injection Vulnerability

FoosunCMS is a content management software based on ASP+ACCESS/MSSQ architecture. FoosunCMS version 1.0 to 2.0 has a SQL injection vulnerability, because the system does not filter the CityId parameter. Allow attackers to exploit the vulnerability to obtain sensitive information in the database...

ADOdb SQL Injection Vulnerability

ADOdb is an intermediate component for PHP programs to access the database . A SQL injection vulnerability exists in version 5.x of ADOdb. An attacker could use this vulnerability to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

SQL injection vulnerability exists in the page /target/lres/message/index.html?t_id=116 of the generic reader education system of Nanjing Oncor Technology Co.

Nanjing Oncor Technology Co., Ltd Esmay Reader Education System is a set of library reader education system. A SQL injection vulnerability exists in the page /target/lres/message/index.html?tid=116 of the general-purpose reader education system of Nanjing ONC Technology Co. An attacker can remote...

SQL Injection Vulnerability in the id parameter of Zhixiang OA System

Zhixiang Information consists of Guangzhou Zhixiang Computer Technology Co., Ltd. and Shenzhen Zhixiang Cloud Information Technology Co., Ltd. and has many offices around the world, which is a customer demand-oriented information technology company centered on the continuous innovation of IT...

Generalized SQL Injection Vulnerability in VOD Live Streaming System of Nanjing Suaxing Information Technology Development Co.

Nanjing Suya Star Information Technology Development Co., Ltd. is for the school distance education and campus entertainment on demand needs and the development of a set of application systems. A generic SQL injection vulnerability exists in the VOD on-demand live streaming system of Nanjing Suya...

SQL Injection Vulnerability in 4a Web-based Teaching Platform System

The "4A Network Teaching Platform" is the preliminary result of the National Modern Distance Education Project Key Technology Research Project "Development of National Modern Distance Education Support System", and it is the earliest network teaching platform researched and developed in China. Th...

SQL Injection Vulnerability in hid_id and oldpwd Parameters of Multiple Series of D-Link Behavioral Gateways

D-Link DAR-8000-X series and DAR-7000-x series Internet Access Behavior Audit Gateways provide Internet access behavior management solutions. A SQL injection vulnerability exists in several series of D-Link behavior gateways. The file in question is autheditepwd.php, and the injection parameters...

SQL Injection Vulnerability in the Title Parameter of the Digital Newspaper System/www/index.php Page of Pleasant Reading Media

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=deliver&title=1, the vulnerability parameter is: title, the attacker can use the vulnerability to...

SQL Injection Vulnerability in the type Parameter of getSpecialIpConfigList of Internet User Speed Measurement Platform of Freescale Technology (Beijing) Co.

FeiShiDa Technology Beijing Co., Ltd. Internet user speed test platform is used to provide users with mobile broadband online test WEB system. The product has a SQL injection vulnerability, the vulnerability URL is: http://target/getSpecialIpConfigList?type=, the injection parameter is: type, the...

SQL injection vulnerability in BlogManage/Resource/UserForResourceList.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. The product BlogManage/Resource/UserForResourceList.aspx page SQL injection vulnerability, an attacker registers an...

SQL injection vulnerability in BlogManage/Video/MyVideoAlbum.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. The product BlogManage/Video/MyVideoAlbum.aspx page SQL injection vulnerability, an attacker registers an account log...

SQL Injection Vulnerability in iGENUS Mail System of Aegisys Technology (Chengdu) Co.

iGENUS mail system based on the Linux platform mail system comprehensive management, using a Web-based graphical management interface multifunctional system. The product exists exists SQL injection vulnerability, the vulnerability URL is: http://target/login.php?Cmd=error&Code=, the vulnerability...

SQL Injection Vulnerability in UserGUID Parameter of UserDataSync.aspx Page of Nanjing Fargo Streaming Media System

Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio/video and mobile communication and other related...

SQL Injection Vulnerability in Gobetter Video Conferencing System of Beijing Gobetter Technology Co.

Gobalt network video conferencing system supports a variety of application scenarios such as work meetings, remote training, product sales, online seminars, consulting services and so on. There is a SQL injection vulnerability in the searchparam parameter of Gobetter videoconferencing system of...

SQL injection vulnerability in the SHREF_NO parameter of PSTAR Freight Information Management System of Yinglian Logistics Technology (Shanghai) Co.

PSTAR Logistics Management System V4.0 is a logistics system. There is a SQL injection vulnerability in the SHREFNO parameter of the PSTAR Freight Information Management System of Yinglian Logistics Technology Shanghai Co: http://target/bill/billq.aspx, an attacker can use the vulnerability to...

SQL Injection Vulnerability in TUTUCMS System by Parameter

TUTUCMS is a CMS image management system focused on the development of image-based websites. TUTUCMS x2.6 version has a SQL injection vulnerability, due to the system does not strictly filter by parameters, only the source code to do the corresponding code audit. This vulnerability allows attacke...